blob: 14c090b7bfc12cff2e52aec8267fba606f7cc042 [file] [log] [blame]
// Copyright 2016 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include <map>
#include "base/synchronization/lock.h"
#include "components/keyed_service/core/refcounted_keyed_service.h"
#include "url/gurl.h"
class Profile;
namespace content {
class WebContents;
} // namespace content
// This class tracks temporary permission grants to allow Flash to run on web
// pages. This is used when the enterprise plugins setting is set to ASK.
// Temporary permission grants last until all granting WebContents for that
// origin are destroyed. |IsFlashEnabled| can be called from any thread.
class FlashTemporaryPermissionTracker : public RefcountedKeyedService {
static scoped_refptr<FlashTemporaryPermissionTracker> Get(Profile* profile);
// Returns true if Flash is enabled for a given |url|. Can be called from any
// thread.
bool IsFlashEnabled(const GURL& url);
// Call if Flash was enabled in the main frame of a given |web_contents|.
// Flash is then enabled for the origin of |web_contents| profile-wide until
// all granting |web_contents| of that origin are destroyed.
void FlashEnabledForWebContents(content::WebContents* web_contents);
friend class FlashTemporaryPermissionTrackerFactory;
friend class FlashTemporaryPermissionTrackerTest;
class GrantObserver;
explicit FlashTemporaryPermissionTracker(Profile* profile);
~FlashTemporaryPermissionTracker() override;
// Revoke access from the given |origin| for a given |web_contents|.
void RevokeAccess(GrantObserver* observer);
// RefCountedProfileKeyedBase method override.
void ShutdownOnUIThread() override;
Profile* profile_;
// We use GURLs to store the origins because we need to support the file:
// scheme comparing equal to itself.
// TODO(raymes): Revisit this after we decide what to do with plugins on file:
// URLs.
std::multimap<GURL, std::unique_ptr<GrantObserver>> granted_origins_;
// Lock to protect |granted_origins_|. This is needed because IsFlashEnabled
// may be called from any thread via the ChromePluginServiceFilter.
base::Lock granted_origins_lock_;